General

  • Target

    8c61353f9b78524565c313e4b386b751

  • Size

    304KB

  • MD5

    8c61353f9b78524565c313e4b386b751

  • SHA1

    67440e45faf6f6775c63cfe62bcf40f79028c793

  • SHA256

    b8ab5a5c3888eaf308526dabd3022788ff348ca6f9ef565daca366a676776758

  • SHA512

    9dc401dbe14219ab646c0183c800be6453e59d42c1750c716e4d0750d67c3864115db2a98b7d3dcd4c6e7c125ee8e3ecad2895328f2a25143984ee4eb698be42

  • SSDEEP

    6144:Sqem6KWineUqoY5D8RgyzWUr98tlt9DS0OR1D55/KFWGg6:Sdm6VbUSYoW+tj9W0k1dGg6

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c61353f9b78524565c313e4b386b751
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections